3a203740b3c4f5c8ef9d9f4973f13f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a203740b3c4f5c8ef9d9f4973f13f41_JaffaCakes118
Size

67KB
MD5

3a203740b3c4f5c8ef9d9f4973f13f41
SHA1

5eb33dfe63ca5312053b15ed00b5274c1a50d617
SHA256

461e4b44989bda94f4cf190f61d02dc5900c7aee1c484581807ea81b79a7e87f
SHA512

ed17a53cc0b6f98e7f5abc4972b3aec3246eb060dabad1c0a0f53247769bb5b9c836947387bac5d441a46b9903d38aad70b0509a70518e6afbc382baf2d877ab
SSDEEP

1536:17tX1w/rAa6H8/vDu8yUbdWSstN+i2XiUbUEeSB4kqGpdQqf1NO5GHFCzWV:17tX1wDAbH8/zbdWSstN+LXiUbKSB4kB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a203740b3c4f5c8ef9d9f4973f13f41_JaffaCakes118

Files

3a203740b3c4f5c8ef9d9f4973f13f41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Chelsea\Visual Studio\DLL_Downloader\DLL_Downloader\obj\x86\Debug\DLL_Downloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ